RustCrypto / RustCrypto/SSH

PQ/T Hybrid Key Exchange

Open
#349 0 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Rust
Stars
247
Forks
64
Avg merge
4d 7h
Merged PRs (30d)
4

Description

OpenSSH 10.0 introduced support for a hybrid key exchange combining ML-KEM and X25519 called mlkem768x25519-sha256:

https://datatracker.ietf.org/doc/draft-ietf-sshm-mlkem-hybrid-kex/

It would be good to add a crate with support for this key exchange algorithm, leveraging the ml-kem and e.g. curve25519-dalek/x25519-dalek crates

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the linked IETF draft for the mlkem768x25519-sha256 key exchange, then review how this Rust SSH project organizes crates and existing key exchange support. Use the ml-kem and x25519-dalek crates as the stated implementation inputs; done means the project has support for the named hybrid algorithm.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
cryptography, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.